EC-COUNCIL EC-COUNCIL Certifications 512-50 Questions & Answers

• Question 341:

  As the Risk Manager of an organization, you are task with managing vendor risk assessments. During the assessment, you identified that the vendor is engaged with high profiled clients, and bad publicity can jeopardize your own brand.

  Which is the BEST type of risk that defines this event?

  A. Compliance Risk

  B. Reputation Risk

  C. Operational Risk

  D. Strategic Risk

  Correct Answer: B

• Question 342:

  Which of the following has the GREATEST impact on the implementation of an information security governance model?

  A. Organizational budget

  B. Distance between physical locations

  C. Number of employees

  D. Complexity of organizational structure

  Correct Answer: D

• Question 343:

  Which of the following intellectual Property components is focused on maintaining brand recognition?

  A. Trademark

  B. Patent

  C. Research Logs

  D. Copyright

  Correct Answer: A

• Question 344:

  Developing effective security controls is a balance between:

  A. Risk Management and Operations

  B. Corporate Culture and Job Expectations

  C. Operations and Regulations

  D. Technology and Vendor Management

  Correct Answer: A

• Question 345:

  The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

  A. Due Protection

  B. Due Care

  C. Due Compromise

  D. Due process

  Correct Answer: B

• Question 346:

  The Information Security Governance program MUST:

  A. integrate with other organizational governance processes

  B. support user choice for Bring Your Own Device (BYOD)

  C. integrate with other organizational governance processes

  D. show a return on investment for the organization

  Correct Answer: A

• Question 347:

  The alerting, monitoring and life-cycle management of security related events is typically handled by the

  A. security threat and vulnerability management process

  B. risk assessment process

  C. risk management process

  D. governance, risk, and compliance tools

  Correct Answer: A

• Question 348:

  Which of the following is a weakness of an asset or group of assets that can be exploited by one or more threats?

  A. Threat

  B. Vulnerability

  C. Attack vector

  D. Exploitation

  Correct Answer: B

• Question 349:

  The success of the Chief Information Security Officer is MOST dependent upon:

  A. favorable audit findings

  B. following the recommendations of consultants and contractors

  C. development of relationships with organization executives

  D. raising awareness of security issues with end users

  Correct Answer: C

• Question 350:

  You have purchased a new insurance policy as part of your risk strategy. Which of the following risk strategy options have you engaged in?

  A. Risk Avoidance

  B. Risk Acceptance

  C. Risk Transfer

  D. Risk Mitigation

  Correct Answer: C